Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File:                     kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier:          1imgEA2qD7zEuqf1ltFSRlS363Nu4la8jXdJrCYA6FU=
Subject key identifier:   C4:54:D6:5F:FF:FD:D7:F1:28:F0:8A:6E:A2:B8:2B:3D:98:4B:E9:A9
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number:          76
Signing time:             Fri 17 Apr 2026 07:36:16 +0000
Manifest this update:     Fri 17 Apr 2026 07:36:15 +0000
Manifest next update:     Fri 24 Apr 2026 07:36:15 +0000
Files and hashes:         1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: +hoxAhgvztrcVpqGdwIhJ2gE9Ii+KJ/s3VwvKLHUdAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Apr 17 07:36:15 2026 GMT
            Not After : Apr 24 07:36:15 2026 GMT
        Subject: CN=69e1e2f0-5374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ff:64:4d:51:56:82:8f:29:e3:e5:46:d4:91:
                    68:02:81:63:d5:1a:8f:57:49:bf:c7:09:d0:d2:66:
                    15:d2:e3:6b:4b:77:5d:58:9c:d4:2e:42:71:08:b8:
                    2c:84:b8:3f:6d:05:7b:69:cb:01:0d:c8:4e:38:b8:
                    fc:47:79:9a:e4:91:6f:63:f3:0d:7e:67:19:d4:12:
                    ff:ce:47:e9:f5:0a:9e:0e:f9:55:95:c2:72:a5:c3:
                    ab:2d:08:1c:e6:8d:d6:02:76:d6:e9:c2:ed:ae:01:
                    78:a8:71:69:d7:d5:ee:63:43:6e:44:ee:d5:0f:f5:
                    37:cb:41:4e:16:09:e1:9a:07:7d:7b:11:79:a4:3b:
                    cc:aa:10:ba:bd:a5:cb:55:c1:db:d7:61:32:eb:d1:
                    a7:69:c0:aa:48:d5:d3:13:79:87:54:2e:06:14:7d:
                    e7:92:31:2b:46:8d:39:21:37:2d:f6:57:f5:f6:d7:
                    b9:9f:e3:3d:fe:10:8e:13:09:2a:44:40:45:49:0d:
                    95:c2:58:71:d5:cd:f5:f8:7e:de:c9:99:41:53:ec:
                    78:ff:31:4b:0e:f0:7c:42:e0:be:17:ce:ea:24:d1:
                    78:19:21:56:1f:08:93:17:75:ea:e2:aa:41:9f:fd:
                    28:93:5d:4e:4d:55:a1:d2:a4:1d:5d:90:ac:af:c8:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:D6:5F:FF:FD:D7:F1:28:F0:8A:6E:A2:B8:2B:3D:98:4B:E9:A9
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:45:ac:20:a6:fd:2f:f6:62:2b:8b:fd:19:30:23:62:7a:a5:
         34:e7:ad:a1:8c:1f:61:79:0a:10:aa:a4:36:53:f3:61:23:04:
         bd:2a:0c:5a:95:df:b4:bc:5c:f9:6e:51:6e:fe:c2:04:5b:74:
         3d:b7:db:58:26:f2:61:b5:f4:34:95:17:d0:d7:84:4e:0a:53:
         b1:b2:65:d3:2f:75:5b:8c:f9:7c:d6:ce:96:39:7d:ac:8d:d5:
         02:4d:ef:52:67:a8:02:68:31:c2:d0:fc:1b:f8:b4:a2:44:af:
         5e:92:1f:64:0c:c8:00:01:22:ea:90:b9:a5:4c:89:e0:7d:24:
         94:59:56:e4:b1:2f:7d:84:5e:73:d0:61:57:de:62:8e:92:47:
         8a:28:c3:c1:f2:92:57:76:6a:9f:c2:06:14:c4:d2:5a:96:24:
         dc:50:6f:78:b3:86:6a:17:c8:77:ab:03:8a:d5:7d:c7:dc:cd:
         f6:12:55:2c:1f:5c:e7:e6:e8:ca:d5:ac:6e:50:3f:cb:7d:06:
         9b:b1:4b:9d:7a:f2:d2:aa:81:df:c5:0c:df:3c:e6:b3:4a:2f:
         e1:80:73:df:c6:3d:9d:b3:81:ee:ac:25:5c:eb:0c:63:b6:f4:
         c7:5a:94:f0:a7:b4:e3:71:7c:58:1c:62:38:28:a0:64:f7:36:
         5f:49:02:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:33:06 2026 by rpki-client